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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
LISTING OF THE CLAIMS: 

1 . (Currently amended) A method of authenticating an attached function for the purpose of 
permitting access by the attached function to network services associated with a network 
infrastructure including a network entry device and another network infrastructure device 
including an IEEE 802. IX Port Access Entity (PAE), the method comprising the steps of: 

a. configuring the network entry device to recognize authentication signals received 
from an attached function, and not to operate as a PAE authenticator : 

b. receiving at the network entry device from the attached function one or more 
signal packets including auth e ntication information ; and 

c. holding or discarding any non-authenticating signals of the one or more signal 
packets; 

fed. transf e rring forwarding by the network entry device only th e one or more signal 
packets including authentication information to the another network infrastructure 
device for authentication through a r e lay function to th e IEEE 802. IX PAE ; and 

e. forwarding non-authenticating signals from the attached function through the 
network entry device only after authentication of the attached function by the 
PAE. 



2. (Currently amended) The method as claimed in Claim 1 further comprising the step of making 
the forwarding of non-authenticating signals transf e r of th e one or more signal packets through 
the relay function compatible with IEEE Standard 802. ID or IEEE Standard 802. 1Q. 

3. (Original) The method as claimed in Claim 2 further comprising the step of examining the 
signal packets for a reserved Media Access Control address and/or an Ethernet type. 

4. (Original) The method as claimed in Claim 1 wherein the authentication information includes 
an Extensible Authentication Protocol message. 
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5. (Currently amended) The method as claimed in Claim 1 wherein the network infrastructure 
includes a plurality of network entry devices , each configured to recognize authentication signals 
to be received from an attached function, and not to operate as a PAE authenticated the method 
further comprising the step of maintaining state for one or more sessions associated with one or 
more the plurality of network entry devices. 

6. (Currently amended) The method as claimed in Claim 5 wherein the step of maintaining state 
is performed by a tracking function of one or more devices of the network infrastructure devices 
including the plurality of network entry devices and the another network infrastructure device . 

7. (Original) The method as claimed in Claim 1 further comprising the steps of recognizing 
through a tracking function of the network infrastructure authentication success messages and 
enabling a change of state associated with a forwarding function of the network entry device. 

8. (Original) The method as claimed in Claim 7 wherein the tracking function forms part of the 
network entry device. 

9. (Currently amended) A system to authenticate an attached function for the purpose of 
permitting access by the attached function to network services associated with a network 
infrastructure, the system comprising: 

a. th e n e twork infrastructure including a network entry device including having an 
uncontroll e d input port, and a c e ntral forwarding devic e including an IEEE 
802. IX Port Acc e ss Entity (PAE), th e syst e m comprising a r e lay function of the 
n e twork entry d e vic e , th e relay function configured to receive and forward only 
authentication signals from the uncontroll e d input port of th e n e twork entry 
deviee- attached function and to hold or discard any non-authenticating signals 
received until after the attached function has been authenticated, wherein the 
network entry device is not an authenticator; and 

b. another network infrastructure device including an IEEE 802. IX Port Access 
Entity (PAE) configured to receive from the network entry device the forwarded 
and forward the authentication signals to the PAE for authentication of the 
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attached function before permitting the network entry device, through the relay 
function, to forward non-authenticating signals from the attached function aeeess 
of th e attach e d function to the network s e rvic e s through the network e ntry device . 

10. (Currently amended) The system as claimed in Claim 9 wherein the relay function forwards 
the non-authenticating auth e ntication signals in a manner compatible with IEEE Standard 
802. ID or IEEE Standard 802. 1Q. 

1 1 . (Original) The system as claimed in Claim 9 wherein the relay function is configured to 
recognize authentication signals for a reserved Media Access Control address and/or an Ethernet 
type. 

12. CANCELLED. 

13. CANCELLED. 

14. (Currently amended) The system as claimed in Claim 9 further comprising a tracking 
function of th e n e twork infrastructur e to monitor authentication auth e nticat e succ e ss messages 
and to enable a change of state associated with a forwarding function of the network entry 
device. 

15. (New) A method of authenticating an attached function for the purpose of permitting access 
by the attached function to network services associated with a network infrastructure including a 
network entry device and another network infrastructure device, the another network 
infrastructure device including attached function authentication functionality, the method 
comprising the steps of: 

a. configuring the network entry device to recognize authentication signals received 
from an attached function, and not to operate as an authentication device; 

b. forwarding by the network entry device only signal packets including 
authentication information to the another network infrastructure device for 
authentication; and 
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c. forwarding non-authenticating signals from the attached function through the 
network entry device only after authentication of the attached function by the 
another network infrastructure device. 

16. (New) The method as claimed in Claim 15 further comprising the step of forcing re- 
authentication of the attached function upon loss of signal packet exchange with the network 
entry device. 

17. (New) The method as claimed in Claim 15 wherein the authentication functionality of the 
another network infrastructure device is an IEEE 801. IX Port Access Entity. 

1 8. (New) The method as claimed in Claim 15 further comprising the steps of recognizing 
through a tracking function of the network infrastructure authentication success messages and 
enabling a change of state associated with a forwarding function of the network entry device. 

19. (New) The method as claimed in Claim 15 further comprising the step of transferring one or 
more signal packets through the network entry device in a format compatible with IEEE 
Standard 802. ID or IEEE Standard 802. 1Q. 

20. (New) The method as claimed in Claim 18 wherein the authentication information includes 
an Extensible Authentication Protocol message. 
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